1
Systems Security Engineering Foundations
medium
An ISSE is defining the boundary of a system under development and must document which components are inside the trusted computing base (TCB) versus outside it. The system includes a commercial hypervisor, guest virtual machines, a management console, and a hardware security module (HSM). Which criterion most directly determines whether a component belongs inside the TCB?